CVE-2009-2935

2009-08-2717:00:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2009-2935

google v8

google chrome

memory reading bypass

sandbox

javascript

nvd

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.054 Low

EPSS

Percentile

93.1%

JSON

Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.

CPENameOperatorVersion
google:chromegoogle chromeeq0.3.154.3
google:chromegoogle chromeeq0.2.149.30
google:chromegoogle chromeeq0.4.154.31
google:chromegoogle chromeeq1.0.154.39
google:chromegoogle chromeeq1.0.154.59
google:chromegoogle chromeeq0.2.149.27
google:chromegoogle chromeeq1.0.154.53
google:chromegoogle chromeeq0.4.154.33
google:chromegoogle chromeeq1.0.154.43
google:chromegoogle chromeeq1.0.154.42

CPE	Name	Operator	Version
google:chrome	google chrome	eq	0.3.154.3
google:chrome	google chrome	eq	0.2.149.30
google:chrome	google chrome	eq	0.4.154.31
google:chrome	google chrome	eq	1.0.154.39
google:chrome	google chrome	eq	1.0.154.59
google:chrome	google chrome	eq	0.2.149.27
google:chrome	google chrome	eq	1.0.154.53
google:chrome	google chrome	eq	0.4.154.33
google:chrome	google chrome	eq	1.0.154.43
google:chrome	google chrome	eq	1.0.154.42